bh333 Privacy Policy

1. Introduction

bh333 is committed to handling your personal information with transparency, integrity, and care. This Privacy Policy has been prepared in plain, accessible English so that every player on our Bangladesh platform can clearly understand how their data is managed. We have organised this document into numbered sections so you can navigate directly to the topics most relevant to you.

This Policy applies to all personal data collected by bh333 through the bh333.io website, mobile-optimised web applications, customer support channels (including email correspondence to [email protected]), and any promotional communications you opt into. It does not apply to third-party websites or services that may be linked from our Platform — those services operate under their own independent privacy policies.

bh333 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or business operations. We will notify registered players of material changes via the email address associated with their account at least 7 days before any revised Policy takes effect. The current version is always published at bh333.io/privacy-policy with the effective date clearly displayed at the top of the page.

2. Data Controller

For the purposes of this Privacy Policy, bh333 is the data controller responsible for the personal data of players who register and use the bh333 platform. The data controller determines the purposes for which personal data is collected and the manner in which it is processed.

All data-related enquiries, access requests, deletion requests, and complaints should be directed to our Data Protection contact at: [email protected] (please use the subject line "Data Privacy Request" for efficient routing). bh333 aims to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days of receipt.

3. Personal Data We Collect

bh333 collects personal data through several channels and for several distinct purposes. The categories of data we may collect include, but are not limited to, the following:

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify that you meet the minimum age requirement of 21 years)
• Email address (used as your primary account identifier and communication channel)
• Username and encrypted password
• Residential address, city, and postal code (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other locations within Bangladesh)
• Mobile phone number (used for account security and SMS notifications, if opted in)

3.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Payment method verification documents (screenshots or statements confirming ownership of the bKash, Nagad, Rocket, or bank account used for deposits)

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment channel references (bKash transaction IDs, Nagad reference numbers, bank transfer receipts, etc.)
• Withdrawal requests, amounts, and processing status
• Account balance history and bonus credit/debit records
• Transaction currency (BDT) and any applicable exchange rate at time of settlement

3.4 Betting & Gaming Activity Data

• Sports bets placed, including market, selection, stake amount (৳), odds, and settlement outcome
• Casino game sessions, including game title, provider, session duration, wager amount, and result
• Bonus and promotional credit usage, including wagering contribution records
• Responsible gaming tool settings (deposit limits, self-exclusion status, session reminders)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps (Bangladesh Standard Time, UTC+6), page views, and navigation paths
• Cookie identifiers and analytics tracking tokens (see Section 9 for full cookie details)

3.6 Communications Data

• Content of emails sent to [email protected], including attachments and metadata
• Live chat transcripts, if chat support is used
• Complaint and dispute records, including supporting evidence submitted by the player
• Records of marketing consent and opt-out requests

4. How We Use Your Personal Data

bh333 uses the personal data described in Section 3 for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, identity documents
Age and identity verification (KYC)	Date of birth, ID documents, proof of address
Processing deposits and withdrawals	Financial data, payment method references
Delivering betting and casino services	Gaming activity data, account balance
Bonus and promotion administration	Gaming activity data, registration data
Fraud detection and prevention	Technical data, financial data, gaming activity
Responsible gaming monitoring	Gaming activity, tool settings, communication records
Customer support and dispute resolution	Communications data, transaction data
Legal and regulatory compliance	All categories as required by applicable law
Platform analytics and improvement	Technical data, gaming activity (aggregated/anonymised)
Marketing communications (with consent)	Registration data, gaming activity, communication preferences

bh333 does not use your personal data for any purpose not listed in this section. If we intend to use your data for a materially new purpose, we will provide prior notice and, where required, obtain your consent before doing so.

5. Legal Basis for Processing

bh333 processes personal data only where a lawful basis for doing so exists. The primary legal bases we rely upon are as follows:

• Performance of a contract: Processing that is necessary to provide you with the bh333 services you have signed up for, including account management, payment processing, and game delivery.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for bh333's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications and non-essential analytics cookies, which we only undertake where you have given clear, freely given, and informed consent. You may withdraw this consent at any time by contacting [email protected].

6. Sharing Your Personal Data

bh333 does not sell, rent, or trade personal data. We may share specific categories of data with the following categories of trusted third parties, solely as required for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process deposits and withdrawals. These providers are bound by their own data protection obligations.
• Game providers: Casino and sports data providers (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) receive session identifiers necessary to deliver games and settle results. They do not receive your full identity data.
• Identity verification services: Where bh333 uses a third-party KYC provider to assist with document verification, your identity documents may be shared with that provider under strict data processing agreements.
• Fraud prevention and AML tools: Anonymised or pseudonymised transaction and device data may be shared with fraud detection platforms to protect the integrity of the Platform and prevent financial crime.
• Legal and regulatory authorities: bh333 may be required by law to disclose personal data to courts, government authorities, or law enforcement agencies. We will only do so in response to a valid and lawful request, and we will inform you where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by bh333 may access personal data on a need-to-know basis under enforceable confidentiality obligations.

Any third party that receives personal data from bh333 is contractually required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law. bh333 does not permit third parties to use your data for their own independent marketing or analytical purposes.

7. International Data Transfers

bh333 primarily processes and stores personal data within secure server infrastructure. In certain circumstances — for example, where a game provider or technology partner operates systems outside Bangladesh — your data may be transferred to and processed in a country other than your country of residence. Where such transfers occur, bh333 takes steps to ensure that appropriate safeguards are in place, including the use of contractual data transfer agreements that require the receiving party to maintain the same standard of data protection as that described in this Policy.

If you have questions about the specific safeguards applied to any international transfer of your data, please contact us at [email protected] with the subject line "Data Transfer Enquiry".

8. Data Retention Periods

bh333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account's active status plus a minimum post-closure period of 5 years, to satisfy financial record-keeping and AML compliance requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in line with standard anti-money laundering obligations.
• Transaction records: Retained for 5 years from the date of each transaction for accounting and regulatory audit purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to a formal dispute or legal claim, in which case it is retained for the duration of those proceedings plus 1 year.
• Marketing consent records: Retained for the period of consent plus 1 year following withdrawal, as evidence of the consent originally granted.
• Technical and device logs: Retained for up to 12 months for security and fraud detection purposes, then automatically purged or anonymised.

When personal data is no longer required and no legal obligation to retain it exists, bh333 will securely delete or irreversibly anonymise that data in accordance with our internal data disposal procedures.

9. Cookies & Tracking Technologies

bh333 uses cookies and similar tracking technologies on the bh333.io platform to deliver core functionality, improve user experience, and analyse platform performance. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable your login session to persist, your account preferences to be saved, and the Platform to load correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users interact with the Platform — including which pages are visited most frequently and how long sessions last. This information is used solely to improve the Platform. These cookies are only placed with your consent.
• Functional cookies: These cookies remember your preferences — such as your preferred payment method or previously visited game categories — to personalise your experience. Placed with your consent.
• Security cookies: These cookies support our fraud detection and account security systems. They help us identify and block suspicious login attempts and anomalous transaction patterns.

You can manage your cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into and using the bh333 Platform. For more information on managing cookies, refer to your browser's help documentation.

bh333 does not use advertising tracking pixels, retargeting scripts, or third-party social media tracking cookies on the Platform.

10. Security Measures

bh333 takes the security of your personal data seriously and maintains technical and organisational measures designed to protect your data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bh333 servers
• Encryption of sensitive data fields (passwords, payment references) at rest using industry-standard algorithms
• Role-based access controls, ensuring that only authorised bh333 personnel can access personal data, and only to the extent required for their role
• Regular third-party security audits and penetration testing of the bh333.io platform infrastructure
• Automated intrusion detection and real-time alerting systems to identify and respond to potential data breaches
• Staff training on data protection obligations and secure data handling procedures

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bh333 will notify affected individuals as required by applicable data protection law and will take immediate steps to contain and remediate the breach.

11. Your Data Rights

As a player on the bh333 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of access: You may request a copy of the personal data that bh333 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: In certain circumstances, you may request that bh333 delete your personal data. This right is subject to limitations where we are required by law to retain data (e.g., AML record-keeping obligations).
• Right to restriction: You may ask us to restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests in certain circumstances.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bh333 will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive, in which case bh333 reserves the right to charge a reasonable administrative fee.

12. Data of Minors

The bh333 platform is strictly intended for adults aged 21 and above. bh333 does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data as far as legally permissible, and report the matter in accordance with our child protection obligations.

If you believe that a minor has registered on the bh333 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. Changes to This Privacy Policy

bh333 may revise this Privacy Policy from time to time. All changes will be published at bh333.io/privacy-policy with an updated effective date. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players by email at least 7 days before the revised Policy takes effect. Non-material clarifications and formatting updates may be made without prior notice.

Your continued use of the bh333 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, please discontinue use of the Platform and contact us to arrange account closure.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bh333, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Data Privacy Request"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Support availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through the appropriate dispute resolution channels described in our Terms & Conditions. bh333 is committed to resolving all privacy concerns in good faith and in a timely manner.